Encryption key management for nb-iot devices

A network device of a telecommunications network, the network device comprising:

• a processor;
• and
• a memory coupled to the processor, wherein the memory stores instructions which, when executed by the processor, cause the network device to:
• obtain multiple types of security features for multiple NB-IoT devices,
• wherein the multiple types of security features include multiple error-detecting codes, encryption algorithms, or encryption keys;
• and
• distribute one type of the multiple types of security features to the multiple NB-IoT devices based on a threat level of each NB-IoT device;
• detect a change in a condition of the telecommunications network;
• and
• in response to the detected change, refresh at least some of the multiple NB-IoT devices to change the one type of multiple types of security features to another type of the multiple types of security features.

A system of a wireless telecommunications network comprising one or more network nodes, the one or more network nodes caused to:

• generate two or more encryption keys for the multiple NB-IoT devices,
• wherein the two or more encryption keys have different encryption strength;
• distribute the two or more encryption keys in accordance with a normal distribution scheme to the multiple NB-IoT devices based on a communications service of each NB-IoT device;
• and
• enable authentication of the multiple NB-IoT devices in accordance with key exchange procedures between the multiple NB-IoT devices and the wireless network using the two or more encryption keys.